Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
## Impact Echo v5's BodyDump middleware captured a bounded prefix, drained the remaining request body while ignoring re
2026-10-24 归档
今日共收录 814 条安全情报，包含 0 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Echo: BodyDump captures request and response bodies without size limits in v4
## Impact Echo v4's opt-in BodyDump middleware read complete request bodies into memory and retained complete response
[原创]CVE-2020-6507利用链
CVE-2020-6507
[原创]CVE-2020-6507利用链
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-39821
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈
CVE-2026-6791
CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈
How CVE-2026-73570 turns a Zimbra log file into remote code execution
CVE-2026-73570
We reproduced the Zimbra command injection vulnerability and found that several public PoCs write a payload Swatchdog ne
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
CVE-2026-115560
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
CVE-2026-112900
Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by speci
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
CVE-2026-111497
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security resea
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
CVE-2026-109619 · CVE-2026-109618
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to r
OP-Print: Tracing Membership Imprints in On-Policy Self-Distillation
On-policy distillation has been widely adopted for alleviating the distribution mismatch of off-policy distillation. Sel
Efficient and Optimal Learning of Discrete Distributions with Person-Level Privacy
We study learning a discrete distribution under person-level differential privacy in the batched setting. Given $n$ user
Homomorphic Encryption with Coset Code Construction
Homomorphic encryption enables computation on input data without decrypting it. This paper extends a construction based
Auditing the Hand-Written Inputs of Learned Access Control
Learned access control is typically deployed behind two hand-built artefacts: a hard-deny set enforced by a small truste
Practical Auditing of Differentially Private Graph Release Mechanisms: Methodology, Toolkit, and Case Study
Differential Privacy (DP) has become a prominent approach for protecting graph data releases, yet empirical auditing met
Structural cryptanalysis of classic McEliece: Assessment of claims, costs and evidence
For the last two years, classical structural attacks on McEliece with binary Goppa codes progressed further, at the para
BelT Block Cipher
BelT is a block cipher with a 128-bit block size and a 256-bit key, developed in Belarus and adopted as part of the Bela
Federated Differentially Private Optimization via Low-Rank Preconditioning
We consider differentially private (DP) optimization in the federated setting, where a DP estimate of the feature covari
ReDence: A Hybrid Agentic and Decision-Model Framework for Rapid, Evidence-Grounded Detection of Modern Social Engineering Scams
Detecting online social engineering (SE) scams often requires examining website workflows, verifying claims against exte
MIG-COW: Transferable Adversarial Attacks on Deepfake Detectors via Gradient Decomposition
Despite recent advances, deepfake detectors remain vulnerable to adversarial examples, particularly in diverse, real-wor